PT-2024-9240

CVE-2024-51544

·

تاريخ النشر

2024-12-05

·

تاريخ التحديث

2024-12-05

الوصف من

CVSS 4.0
8.8
عالية
المقاييسAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:L/SI:L/SA:L
Name of the Vulnerable Software and Affected Versions: ABB ASPECT Enterprise version 3.08.02 NEXUS Series version 3.08.02 MATRIX Series version 3.08.02
Description: The issue is related to errors in system settings or configuration, allowing a remote attacker to gain unauthorized access to protected information. It affects the Service Control component, enabling access to service restart requests and virtual machine configuration settings.
Recommendations: For ABB ASPECT Enterprise version 3.08.02, consider disabling the Service Control feature until a patch is available. For NEXUS Series version 3.08.02, restrict access to the service restart requests and virtual machine configuration settings to minimize the risk of exploitation. For MATRIX Series version 3.08.02, avoid using the vulnerable Service Control component until the issue is resolved.
قابلية الاستغلال
إصلاح
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾